A minimum of two syslog servers must be deployed in the management network.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-251373	NET1025	SV-251373r916119_rule		Low

Description
Maintaining an audit trail of system activity logs can help identify configuration errors, understand past intrusions, troubleshoot service disruptions, and react to probes and scans of the network.

STIG	Date
Network Infrastructure Policy Security Technical Implementation Guide	2023-05-04

Details

Check Text ( C-54808r916117_chk )
Review the network topology and verify that at least two syslog servers are located within the management network. Note the IP addresses as documented on the management network topology and verify that this is what is configured on the network elements as the host devices for sending syslog data. If a minimum of two syslog servers have not been deployed in the management network, this is a finding.

Check Text ( C-54808r916117_chk )

Review the network topology and verify that at least two syslog servers are located within the management network. Note the IP addresses as documented on the management network topology and verify that this is what is configured on the network elements as the host devices for sending syslog data.

If a minimum of two syslog servers have not been deployed in the management network, this is a finding.

Fix Text (F-54761r916118_fix)
Stand up at least two syslog servers and connect them to the management network. Configure all managed network elements to send syslog data to the syslog servers.